Privacy.

This notice covers the gortex.ai website and the demos at demo.gortex.ai. Data you send to the Gortex API as a customer is governed by your agreement with us, not by this page.

Gortex, Inc. ("Gortex"), 440 N Wolfe Rd, Suite E133, Sunnyvale, CA 94085, is the controller of any personal data processed through this site. For anything in this notice, including data access, correction, or deletion requests and any grievance, the contact point is h@gortex.ai. We answer these ourselves.

This is a static marketing site. It has no login and no account. Depending on what you do here, we process up to four things:

Where the GDPR or UK GDPR applies, our basis for server logs and the cookieless Vercel analytics is legitimate interest (Article 6(1)(f)): operating, securing, and understanding use of the site. For the optional product analytics, PostHog and Google Analytics, which store an identifier on your device, EU and UK visitors are asked first and our basis is your consent (Article 6(1)(a)), collected through the banner before anything loads. Outside the EU and UK, where prior consent is not required, both run on an opt-out basis under the applicable local law, and we still honor Global Privacy Control. For the request-access form, our basis is taking steps you asked for before a possible contract (Article 6(1)(b)), and our legitimate interest in following up with people who asked to hear from us (Article 6(1)(f)). You can withdraw consent or opt out at any time via privacy choices in the footer, or object to the legitimate-interest processing by emailing us.

Giving us personal data is never required to read this site. The form needs a name and email address only because we cannot reply without them. We make no decisions about you by automated means alone.

We do not sell your personal data, share it for cross-context behavioral advertising, or use it for targeted ads. There is nothing here to opt out of on that front. We would disclose data to authorities only where the law requires it.

Gortex is based in the United States, and the site runs on Vercel's global infrastructure, which may process requests in the United States. We self-host our fonts and the demo libraries, so no personal data is sent to a third-party font or script CDN. When product analytics is active, that data is also processed by PostHog and Google in the United States. For visitors in the EEA or UK we rely on Standard Contractual Clauses (and, where a provider is certified, the EU-US Data Privacy Framework) as the safeguard for these transfers. Request-access submissions are stored by Tally in the EU and reach us in the United States under the same safeguards.

Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to the processing of your personal data, and to withdraw consent at any time without affecting processing that already happened, under the GDPR and UK GDPR, US state privacy laws, India's DPDP Act, and similar regimes. Because we hold so little, most requests are simple. To exercise any right, or to raise a grievance, email h@gortex.ai and we will respond within the time your law allows. We will not treat you differently for using these rights. If you are in the EEA or UK, you can also complain to your local data protection authority, though we would like the chance to fix it first.

This site is meant for people at work and is not directed at children.

By default we store two small preferences in your browser's local storage, which never leave your device and we never receive: your light or dark theme choice (gortex-theme) and your analytics consent choice (gortex-consent), so we remember not to ask again. We also set one strictly-necessary cookie, gx-region, that only records whether your region uses the ask-first or opt-out flow described above. Beyond that we set no cookies of our own. Only when product analytics is active do our providers set their own first-party identifiers to measure usage: PostHog sets a ph_*_posthog cookie and matching local storage, and Google Analytics sets the cookies _ga and _ga_*. These last up to one year (PostHog) and two years (Google) unless you clear them. Where you have rejected, opted out, or sent a Global Privacy Control signal, nothing of the sort is stored. Opening the request-access form loads Tally, which may set its own strictly-necessary cookies to run the form.